Travis L. Bean
2004-Apr-02 01:57 UTC
[Samba] Erratic behavior when Windows XP clients attempt to login to PDC
I have noticed while testing my Samba 3.0.2a primary and backup domain controllers with Windows XP clients, that when I attempt to login to the Samba PDC, the XP client will sometimes randomly choose the backup domain controller. I only want the client to join the backup domain controller when the PDC is offline. I am not experiencing any random network outages or DNS failures so I am bewildered as to why I am experiencing this erratic bahavior. The following is my global config. from my smb.conf on my bdc and pdc. Any help and advice would be greatly appreciated: [global] workgroup = BIOLOGICAQUA server string = PDC-SRV passdb backend = 'ldapsam:ldaps://pdc-srv.biologicaqua.org ldaps://bdc-srv.biologicaqua.org' passwd program = /usr/local/sbin/smbldap-passwd -o %u passwd chat = *new*password* %n\n *new*password:* %n\ *successfully* passwd chat debug = Yes log file = /var/log/samba/log.%m max log size = 50 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 add user script = /usr/local/sbin/smbldap-useradd -m "%u" add group script = /usr/local/sbin/smbldap-groupadd -p "%g" add user to group script = /usr/local/sbin/smbldap-groupmod -m "%u" "%g" delete user from group script = /usr/local/sbin/smbldap-groupmod -x "%u" "%g" set primary group script = /usr/local/sbin/smbldap-usermod -g "%g" "%u" add machine script = /usr/local/sbin/smbldap-useradd -w "%u" logon script = netlogon.bat logon path = \\pdc-srv.biologicaqua.org\profiles\%U logon drive = H: logon home = \\pdc-srv.biologicaqua.org\%U\.profile domain logons = Yes os level = 64 preferred master = Yes domain master = Yes wins support = Yes ldap suffix = dc=biologicaqua,dc=org ldap machine suffix = ou=Computers ldap user suffix = ou=Users ldap group suffix = ou=Groups ldap admin dn = "cn=Manager,dc=biologicaqua,dc=org" ldap passwd sync = Yes ldap delete dn = Yes admin users = Admin-Access hosts allow = 10.0.0., 127. hosts deny = all [global] workgroup = BIOLOGICAQUA server string = BDC-SRV passdb backend = 'ldapsam:ldaps://pdc-srv.biologicaqua.org ldaps://bdc-srv.biologicaqua.org' passwd program = /usr/local/sbin/smbldap-passwd -o %u passwd chat = *new*password* %n\n *new*password:* %n\ *successfully* passwd chat debug = Yes log file = /var/log/samba/log.%m max log size = 50 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 add user script = /usr/local/sbin/smbldap-useradd -m "%u" add group script = /usr/local/sbin/smbldap-groupadd -p "%g" add user to group script = /usr/local/sbin/smbldap-groupmod -m "%u" "%g" delete user from group script = /usr/local/sbin/smbldap-groupmod -x "%u" "%g" set primary group script = /usr/local/sbin/smbldap-usermod -g "%g" "%u" add machine script = /usr/local/sbin/smbldap-useradd -w "%u" logon script = netlogon.bat logon path = \\bdc-srv.biologicaqua.org\profiles\%U logon drive = H: logon home = \\bdc-srv.biologicaqua.org\%U\.profile domain logons = Yes os level = 32 preferred master = Yes domain master = No wins support = Yes ldap suffix = dc=biologicaqua,dc=org ldap machine suffix = ou=Computers ldap user suffix = ou=Users ldap group suffix = ou=Groups ldap admin dn = "cn=Manager,dc=biologicaqua,dc=org" ldap passwd sync = Yes ldap delete dn = Yes admin users = Admin-Access hosts allow = 10.0.0., 127. hosts deny = all browseable = No
Hi, I am running samab 2.2.8a on Redhat 9. in my smb.conf file I set wins support =yes. But this machine is not reponding wins request. No process binding on wins port. Here is the smb.conf output: # testparm | grep win name resolve order = lmhosts host wins bcast max wins ttl = 518400 min wins ttl = 21600 wins proxy = No wins server wins support = Yes wins hook #grep win /etc/services nextstep 178/tcp NeXTStep NextStep # NeXTStep window wins 1512/tcp # Microsoft's Windows Internet Name Service wins 1512/udp # Microsoft's Windows Internet Name Service [root@jupiter root]# netstat -an --ip |grep 1512 tcp 0 0 0.0.0.0:515 0.0.0.0:* LISTEN [ root]# ps -fed|grep nm root 10503 1 0 Mar13 ? 00:01:28 nmbd -D root 10504 10503 0 Mar13 ? 00:00:00 nmbd -D root 22826 22779 0 21:58 pts/0 00:00:00 grep nm #/etc/init.d/smb status smbd (pid 22374 21676 20694 20482 20426 19506 19295 18231 10552 10551 10498) is running... nmbd (pid 10504 10503) is running... [root@jupiter root]# rpm -qa |grep samba samba-common-2.2.8a-0 samba-client-2.2.8a-0 samba-debuginfo-2.2.8a-0 samba-swat-2.2.8a-0 samba-2.2.8a-0 I would except some process on 1512 wins port. Any input on this? Thanks SR
Craig White
2004-Apr-02 05:09 UTC
[Samba] Erratic behavior when Windows XP clients attempt to login to PDC
On Thu, 2004-04-01 at 18:56, Travis L. Bean wrote:> I have noticed while testing my Samba 3.0.2a primary and backup domain > controllers with Windows XP clients, that when I attempt to login to the > Samba PDC, the XP client will sometimes randomly choose the backup > domain controller. I only want the client to join the backup domain > controller when the PDC is offline. I am not experiencing any random > network outages or DNS failures so I am bewildered as to why I am > experiencing this erratic bahavior. The following is my global config. > from my smb.conf on my bdc and pdc. Any help and advice would be greatly > appreciated: > > > [global] > workgroup = BIOLOGICAQUA > server string = PDC-SRV > passdb backend = 'ldapsam:ldaps://pdc-srv.biologicaqua.org > ldaps://bdc-srv.biologicaqua.org' > passwd program = /usr/local/sbin/smbldap-passwd -o %u > passwd chat = *new*password* %n\n *new*password:* %n\ > *successfully* > passwd chat debug = Yes > log file = /var/log/samba/log.%m > max log size = 50 > socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 > add user script = /usr/local/sbin/smbldap-useradd -m "%u" > add group script = /usr/local/sbin/smbldap-groupadd -p "%g" > add user to group script = /usr/local/sbin/smbldap-groupmod -m > "%u" "%g" > delete user from group script = /usr/local/sbin/smbldap-groupmod > -x "%u" "%g" > set primary group script = /usr/local/sbin/smbldap-usermod -g > "%g" "%u" > add machine script = /usr/local/sbin/smbldap-useradd -w "%u" > logon script = netlogon.bat > logon path = \\pdc-srv.biologicaqua.org\profiles\%U > logon drive = H: > logon home = \\pdc-srv.biologicaqua.org\%U\.profile > domain logons = Yes > os level = 64 > preferred master = Yes > domain master = Yes > wins support = Yes > ldap suffix = dc=biologicaqua,dc=org > ldap machine suffix = ou=Computers > ldap user suffix = ou=Users > ldap group suffix = ou=Groups > ldap admin dn = "cn=Manager,dc=biologicaqua,dc=org" > ldap passwd sync = Yes > ldap delete dn = Yes > admin users = Admin-Access > hosts allow = 10.0.0., 127. > hosts deny = all > > > [global] > workgroup = BIOLOGICAQUA > server string = BDC-SRV > passdb backend = 'ldapsam:ldaps://pdc-srv.biologicaqua.org > ldaps://bdc-srv.biologicaqua.org' > passwd program = /usr/local/sbin/smbldap-passwd -o %u > passwd chat = *new*password* %n\n *new*password:* %n\ > *successfully* > passwd chat debug = Yes > log file = /var/log/samba/log.%m > max log size = 50 > socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 > add user script = /usr/local/sbin/smbldap-useradd -m "%u" > add group script = /usr/local/sbin/smbldap-groupadd -p "%g" > add user to group script = /usr/local/sbin/smbldap-groupmod -m > "%u" "%g" > delete user from group script = /usr/local/sbin/smbldap-groupmod > -x "%u" "%g" > set primary group script = /usr/local/sbin/smbldap-usermod -g > "%g" "%u" > add machine script = /usr/local/sbin/smbldap-useradd -w "%u" > logon script = netlogon.bat > logon path = \\bdc-srv.biologicaqua.org\profiles\%U > logon drive = H: > logon home = \\bdc-srv.biologicaqua.org\%U\.profile > domain logons = Yes > os level = 32 > preferred master = Yes > domain master = No > wins support = Yes > ldap suffix = dc=biologicaqua,dc=org > ldap machine suffix = ou=Computers > ldap user suffix = ou=Users > ldap group suffix = ou=Groups > ldap admin dn = "cn=Manager,dc=biologicaqua,dc=org" > ldap passwd sync = Yes > ldap delete dn = Yes > admin users = Admin-Access > hosts allow = 10.0.0., 127. > hosts deny = all > browseable = No----- FWIW on my BDC - preferred master = No domain master = Yes wins support = No wins server = (IP_address_of_PDC) Craig